Update debugfs_launched_in_privilleged_container.go

Signed-off-by: Kapil Sharma <ks3913688@gmail.com>
falcosecurity · Apr 3, 2024 · 9a0747d · 9a0747d
1 parent 1d911a9
commit 9a0747d
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/events/syscall/debugfs_launched_in_privilleged_container.go b/events/syscall/debugfs_launched_in_privilleged_container.go
@@ -25,7 +25,7 @@ var _ = events.Register(DebugfsLaunchedInPrivilegedContainer)
 
 func DebugfsLaunchedInPrivilegedContainer(h events.Helper) error {
     if h.InContainer() {
-        cmd := exec.Command("/usr/bin/debugfs")
+        cmd := exec.Command("debugfs")
         cmd.SysProcAttr = &syscall.SysProcAttr{
             Cloneflags: syscall.CLONE_NEWNS | syscall.CLONE_NEWUSER,
         }